This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/gYLvy5DjMihQxbK3CpNYolCJCbs.roa File: gYLvy5DjMihQxbK3CpNYolCJCbs.roa (raw, json) Hash identifier: nk0QPIHhBJ+tkBFjYJBMoGr2Na3j2yW9OuuUU/oPTZc= Subject key identifier: 81:82:EF:CB:90:E3:32:28:50:C5:B2:B7:0A:93:58:A2:50:89:09:BB Certificate issuer: /CN=1739f964cd489fcd2500b37681d58479d553c8ab Certificate serial: 019B7BA31FFDA1CB8C900902AA3758A48124 Authority key identifier: 17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/gYLvy5DjMihQxbK3CpNYolCJCbs.roa Signing time: Thu 01 Jan 2026 22:17:26 +0000 ROA not before: Thu 01 Jan 2026 22:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51343 IP address blocks: 178.214.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1f:fd:a1:cb:8c:90:09:02:aa:37:58:a4:81:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1739f964cd489fcd2500b37681d58479d553c8ab Validity Not Before: Jan 1 22:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8182efcb90e3322850c5b2b70a9358a2508909bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2c:99:15:ef:5d:9f:1d:da:51:64:6a:f7:74: de:3a:d2:0e:d1:53:1e:06:83:e2:ea:45:3c:5e:db: 4f:e4:4d:9f:62:ac:f2:ae:50:2e:59:1b:45:8d:f6: 30:4d:b5:cd:bd:71:03:5a:c0:52:ad:2b:67:53:0b: 5b:36:88:49:a4:08:9c:f4:52:b9:73:9a:0a:3e:91: c8:59:a6:dd:e3:53:a2:5b:ef:b1:28:dd:e5:c0:45: bc:ae:56:a2:c6:d0:e6:59:dc:db:e4:ef:2a:f6:3f: 3e:1e:de:b0:a2:05:30:30:c1:3f:41:32:63:e6:16: f7:2e:d2:de:0b:27:51:bd:a3:6b:52:7d:08:92:26: b2:b0:2d:a2:56:c5:97:e2:86:8a:bb:a0:c3:0d:7f: d8:3b:3d:3c:3a:b4:c7:e5:2d:65:c8:bb:94:93:cf: 55:3a:c4:a8:ec:27:c9:87:15:bb:98:1b:4b:d8:06: 0f:0e:85:78:0c:b4:cd:f6:ba:1f:c3:a2:05:4c:67: 94:6a:67:88:ed:67:eb:7c:f8:fa:e4:c9:79:1c:74: d4:9e:87:11:7b:b0:9a:6e:af:49:42:db:90:6e:d3: b9:4b:06:4c:c1:c4:a8:7d:7c:91:6e:ee:93:0d:c7: ce:92:65:d0:84:b5:9f:3e:7d:07:9a:ee:53:4c:76: 0d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:82:EF:CB:90:E3:32:28:50:C5:B2:B7:0A:93:58:A2:50:89:09:BB X509v3 Authority Key Identifier: keyid:17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/gYLvy5DjMihQxbK3CpNYolCJCbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.214.32.0/19 Signature Algorithm: sha256WithRSAEncryption 42:55:94:3a:fb:ae:6b:ba:9e:9c:9b:c8:65:b2:36:fd:90:04: 47:51:a6:85:23:27:e8:a1:a8:86:e5:1f:7d:f1:1c:5f:a2:d0: 28:34:a2:33:00:66:fd:f9:ec:3e:10:3b:8e:e8:0b:ae:97:2f: 34:8b:dc:2d:2a:e3:c5:57:12:11:e5:61:1f:79:bd:43:d1:9f: 49:7a:a6:f5:d6:88:d2:8d:1c:45:2c:1e:29:44:4a:34:68:65: e0:a5:71:dc:39:93:64:fc:b1:a5:c3:9b:c0:92:d0:e0:4b:02: 59:88:ea:a3:26:5d:08:eb:6d:93:0b:cf:c9:45:6e:79:ca:94: e5:78:e1:68:db:82:b4:f6:b5:8f:15:b1:bc:8f:f4:c9:15:de: 28:e9:3f:ae:5d:c7:76:a4:56:3b:ff:ef:99:6c:49:8a:87:09: 1b:29:90:64:33:0d:1c:b2:ab:b5:24:a7:72:38:b9:9e:eb:b7: 21:c9:d0:2c:23:c0:06:b6:0c:90:15:c3:c5:1c:42:5e:4d:81: b3:12:e2:e4:1f:58:8d:7f:54:5d:eb:d8:f7:d6:33:71:8c:6e: 23:9b:ec:8d:a2:ae:7c:47:bb:78:33:8f:eb:65:1b:96:bf:c6: 11:d3:aa:e0:0d:c0:72:f6:70:55:3e:03:46:7f:f6:cd:aa:f8: cf:f2:2c:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7ox/9ocuMkAkCqjdYpIEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MzlmOTY0Y2Q0ODlmY2QyNTAwYjM3NjgxZDU4NDc5ZDU1 M2M4YWIwHhcNMjYwMTAxMjIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTgyZWZjYjkwZTMzMjI4NTBjNWIyYjcwYTkzNThhMjUwODkwOWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSyZFe9dnx3aUWRq93TeOtIO0VMe BoPi6kU8XttP5E2fYqzyrlAuWRtFjfYwTbXNvXEDWsBSrStnUwtbNohJpAic9FK5 c5oKPpHIWabd41OiW++xKN3lwEW8rlaixtDmWdzb5O8q9j8+Ht6wogUwMME/QTJj 5hb3LtLeCydRvaNrUn0IkiaysC2iVsWX4oaKu6DDDX/YOz08OrTH5S1lyLuUk89V OsSo7CfJhxW7mBtL2AYPDoV4DLTN9rofw6IFTGeUameI7WfrfPj65Ml5HHTUnocR e7Cabq9JQtuQbtO5SwZMwcSofXyRbu6TDcfOkmXQhLWfPn0Hmu5TTHYNVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIGC78uQ4zIoUMWytwqTWKJQiQm7MB8GA1UdIwQY MBaAFBc5+WTNSJ/NJQCzdoHVhHnVU8irMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnpuNVpNMUluODBsQUxOMmdkV0VlZFZUeUtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zOTQ0NTUtNjRiNi00ZTEwLWE3OTIt NzJkMWZmZTI1YmQzLzEvZ1lMdnk1RGpNaWhReGJLM0NwTllvbENKQ2JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8zOTQ0NTUtNjRiNi00ZTEwLWE3OTItNzJkMWZmZTI1YmQz LzEvRnpuNVpNMUluODBsQUxOMmdkV0VlZFZUeUtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFstYgMA0G CSqGSIb3DQEBCwUAA4IBAQBCVZQ6+65rup6cm8hlsjb9kARHUaaFIyfooaiG5R99 8RxfotAoNKIzAGb9+ew+EDuO6Auuly80i9wtKuPFVxIR5WEfeb1D0Z9Jeqb11ojS jRxFLB4pREo0aGXgpXHcOZNk/LGlw5vAktDgSwJZiOqjJl0I622TC8/JRW55ypTl eOFo24K09rWPFbG8j/TJFd4o6T+uXcd2pFY7/++ZbEmKhwkbKZBkMw0csqu1JKdy OLme67chydAsI8AGtgyQFcPFHEJeTYGzEuLkH1iNf1Rd69j31jNxjG4jm+yNoq58 R7t4M4/rZRuWv8YR06rgDcBy9nBVPgNGf/bNqvjP8iwm -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:45 2026 by rpki-client